Google Pay

AppWizard
April 22, 2026
Google has introduced a new lock screen widget for Android 16 that provides real-time updates on flight progress, including departing and destination airports, estimated arrival time, and a visual progress bar. Users can access this feature by adding their boarding pass to Google Wallet, which will automatically display the widget shortly before takeoff. Google Wallet, which transitioned from Google Pay in 2024, is the primary platform for managing credit cards and digital documents on Android devices.
AppWizard
April 3, 2026
Google Pay's Tap to Pay feature, launched in 2020, allows contactless payments using NFC technology. Initially compatible with only two banks, it now works with most major debit and credit cards in India. Users can add their cards to Google Pay, and payments can be made by selecting the card and tapping the phone near a point-of-sale machine. The feature supports most Visa and MasterCard cards issued in India, while American Express cards are excluded. There are no transaction limits, and a PIN is required for high-value transactions. The setup process involves adding card details and authenticating via SMS. Tap to Pay can also be used internationally, except in China.
AppWizard
February 25, 2026
Numo has introduced a tap-to-pay point-of-sale app that allows merchants to accept Bitcoin payments without additional hardware, utilizing the Cashu open-source ecash protocol. The app is available for free as an open-source Android download, with plans for a Google Play Store release. It uses NFC technology for quick transactions, enabling customers to pay via a Cashu wallet interacting with an NFC tag on the merchant's device. Payments are settled in Cashu ecash, which can be automatically transferred to a merchant's Lightning address once a specified balance is reached. Numo also supports Lightning invoices and offers features like inventory management, payment history tracking, offline payment support, and tipping options. The app has no platform fees and is developed under the MIT license, aiming to simplify Bitcoin payments for merchants. Cashu employs blind signatures for privacy-preserving custodial payments and connects independent mints over the Lightning Network.
AppWizard
January 12, 2026
Google has introduced the Universal Commerce Protocol (UCP), which enables AI agents to manage product searches, checkout processes, and payments for users. UCP standardizes communication between AI agents and various retailers and payment platforms, including Shopify, Walmart, and Visa. The AI-driven checkout feature will be available in Google Search's AI Mode and the Gemini app, using data from Google Pay and Google Wallet. Google is also launching Business Agents and Direct Offers to enhance customer engagement within AI shopping environments. UCP allows AI agents to perform the entire shopping process with a single command, simplifying online shopping. Google has partnered with companies like Etsy, Target, American Express, Best Buy, Flipkart, Mastercard, Stripe, and Visa to implement this protocol. Users in the U.S. will benefit from features like automatic shipping information usage and upcoming support for PayPal. The Business Agent acts as a virtual sales assistant, and Direct Offers provide exclusive coupons to shoppers. Google aims to make AI-driven shopping experiences standard, allowing seamless retailer interactions.
AppWizard
November 13, 2025
Google has launched Gemini tools to enhance holiday shopping with AI assistance, enabling real-time inventory checks and agentic checkout. Users can engage with AI to receive tailored product results, including images, pricing, reviews, and inventory status. The AI can locate products in stock at nearby stores and contact retailers on behalf of users. Additionally, the agentic checkout feature allows users to track specific items and receive notifications for price drops, facilitating purchases directly through Google Pay. These features are currently available in the U.S. as of November 13, with plans for future expansion.
AppWizard
November 3, 2025
Researchers from Zimperium zLabs have identified over 760 Android applications exploiting Near-Field Communication (NFC) and Host Card Emulation (HCE) technologies to illegally acquire payment data. Since April 2024, there has been a significant increase in NFC relay fraud, affecting banks, payment services, and government portals globally, including Russian banks and various European financial institutions. The malware operates as paired “scanner/tapper” toolchains or standalone data collectors, exfiltrating sensitive EMV data and transmitting it to Telegram channels. Operators control these applications via command-and-control (C2) servers, allowing for fraudulent transactions with minimal user involvement. More than 70 C2 servers and numerous Telegram bots have targeted over 20 institutions worldwide, primarily focusing on Russian banks. The rise of “Tap-to-Pay” transactions has made NFC a target for cybercriminals, with harmful applications exploiting Android’s NFC permissions to steal payment data. Zimperium has provided Indicators of Compromise (IOCs) related to this campaign for safeguarding systems.
AppWizard
October 30, 2025
Cybersecurity researchers at zLabs have identified over 760 malicious Android applications that exploit Near Field Communication (NFC) and Host Card Emulation (HCE) technologies to steal payment data and facilitate fraudulent transactions. Since April 2024, these applications have evolved into a coordinated global operation targeting financial institutions in countries such as Russia, Poland, the Czech Republic, Slovakia, and Brazil. The threat actors have established around 70 command-and-control servers and use Telegram bots for data exfiltration. The malicious apps impersonate about 20 legitimate entities, focusing on Russian banks and international institutions like Santander and Google Pay. They utilize various strategies to compromise payment credentials, including scanner and tapper tools, and employ simplified interfaces resembling legitimate banking portals. The malware activates a Host Card Emulation service during NFC payment events for real-time data relay. To evade detection, the threat actors use name masquerading, code obfuscation, and software packing techniques. This campaign represents a significant escalation in NFC-based financial fraud, highlighting the risks associated with NFC payment privileges.
Search